Express Files Updater - what is this?
When I go to FF home page an update screen opens up for Express Files Updater, requesting me to update. Is this part of FF / Mozilla and should I update? Thank you for help.
Additional System Details
- Next Generation Java Plug-in 10.11.2 for Mozilla browsers
- Shockwave Flash 11.5 r502
- Adobe PDF Plug-In For Firefox and Netscape 11.0.01
- RealJukebox Netscape Plugin
- RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
- RealPlayer(tm) HTML5VideoShim Plug-In
- RealPlayer(tm) LiveConnect-Enabled Plug-In
- RealPlayer Download Plugin
- Google Update
- The plug-in allows you to open and edit files using Microsoft Office applications
- Office Authorization plug-in for NPAPI browsers
- User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:18.0) Gecko/20100101 Firefox/18.0
Can you attach a screenshot?
Use a compressed image type like PNG or JPG to save the screenshot.
What is your home page?
My homepage is Mozilla. Here's a copy of the update screen.. Thanks.
No this isn't part of Firefox and it looks suspicious to me.
Do a malware check with some malware scanning programs on the Windows computer.
You need to scan with all programs because each program detects different malware.
Make sure that you update each program to get the latest version of their databases before doing a scan.
- Malwarebytes' Anti-Malware:
- Microsoft Safety Scanner:
- Windows Defender: Home Page:
- Spybot Search & Destroy:
- Kasperky Free Security Scan:
You can also do a check for a rootkit infection with TDSSKiller.
- "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
You may have the Express Files Updater application installed as look for the efupdater.exe
I've tried completing a System Restore, but it won't complete because of a program that's running, even when I've turned everything off, so I'm assuming this EFU file is causing the problem.
I've just tracked the file down in my Program Files (x86) folder, deleted it, and emptied the Recycle Bin... but if my IT guru is right, it'll still be hidden in the file it came in, and will come back again.
Watch this space!